coinbasecustomerservicee[.]blogspot[.]com

The domain coinbasecustomerservicee.blogspot.com is identified as a high-risk brand impersonation threat targeting Coinbase. The primary objective of this domain is to deceive users into believing they are interacting with legitimate Coinbase customer support, potentially leading to the theft of sensitive information such as login credentials or financial data.

Technical indicators reveal that the domain has a VirusTotal detection score of 12/95, indicating that 12 out of 95 security vendors flag this domain as suspicious. The domain is registered through MarkMonitor, Inc., and resolves to the IP address 142.251.111.132, which is located in the United States and associated with the Autonomous System AS15169 (Google LLC). The domain was created on July 31, 2000, and has been flagged by Google Safe Browsing as a phishing site. Additionally, the domain appears on 3 security blocklists, further emphasizing its malicious nature.

As of the current analysis, the domain coinbasecustomerservicee.blogspot.com has been taken offline. Despite this, the infrastructure remains a point of concern, and users are advised to remain vigilant. Organizations and individuals should ensure that any links or communications claiming to be from Coinbase are verified through official channels. Security teams are encouraged to continue monitoring for any reactivation of the domain or similar threats.